update the composer.json

[lsmith77]

fix the package name, description, license etc.
also make sure that ideally there are only specific versions or branches used.
make sure that custom branches have been merged upstream etc.

[ghost]

👍

This is something I do for all apps I build.

[winzou]

Can you write a proposal for it? Thanks!

[jjsaunier]

We also can add a security check on composer.lock. It's a service provided by sensioLabs who collect vulnerabilites inside your dependencies and you will be warn of discovered.

Few links :

• https://security.sensiolabs.org
• https://github.com/sensiolabs/security-checker

[Filoz]

👍 for @lsmith77 and @Prophet777 suggestions